CVE-2026-13303
HIGH
MEDIUM
Priority: 0.00
BB Relevance:
62/100
Published: 2026-10-29
Modified: 2026-10-29
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
Scope Change
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
High
UI:
None
S:
Changed
C:
High
I:
High
A:
None
Description
HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store integration that may allow an authenticated user with permission to manage credential stores and credential libraries within a project to cause the Boundary controller to issue outbound requests to a network destination of the requester's choosing and to receive the response. This may expose endpoints reachable only from the controller's host, such as a cloud instance metadata service. This vulnerability, CVE-2026-13303, is fixed in Boundary Enterprise 1.0.2 and 0.21.6.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| HashiCorp | Boundary | 0.21.3 < * |
| HashiCorp | Boundary Enterprise | 0.21.3 < 1.0.2 |